This option specifies the hosts that will be forced into using SSL. The syntax for specifying hosts and addresses is the same as the
hosts
allow and the
hosts
deny configuration options. For example:
[global]
ssl = yes
ssl hosts = 192.168.220.
This example specifies that all hosts that fall into the 192.168.220 subnet must use SSL connections with the client. This type of structure is useful if you know that various connections will be made by a subnet that lies across an untrusted network, such as the Internet. If neither this option nor the
ssl
hosts
resign option has been specified, and
ssl is set to
yes, Samba will allow only SSL connections from all clients.
